Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UCkRIhQEktaarVMqQCJKdNSI6-8.roa
File:                     UCkRIhQEktaarVMqQCJKdNSI6-8.roa (raw, json)
Hash identifier:          2C5uwSA4M4ibe2EfINYf2sxPZGZC1FSKLsINMY64vM8=
Subject key identifier:   50:29:11:22:14:04:92:D6:9A:AD:53:2A:40:22:4A:74:D4:88:EB:EF
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       085C
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UCkRIhQEktaarVMqQCJKdNSI6-8.roa
Signing time:             Wed 04 Nov 2020 08:38:11 +0000
ROA not before:           Wed 04 Nov 2020 08:38:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        121.50.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  4 08:38:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=50291122140492D69AAD532A40224A74D488EBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:c0:85:78:ae:ab:77:ec:88:3e:39:5d:97:
                    32:0c:6e:71:2d:fb:f2:d0:b1:72:72:79:fb:88:40:
                    59:f4:2a:6e:c4:f6:9e:26:a4:8a:93:ed:93:8f:2f:
                    06:81:6f:9a:7b:f9:0c:15:c8:02:e0:a8:06:cd:85:
                    92:0e:59:71:1d:2c:dd:f4:6d:fd:da:2b:e4:9f:29:
                    72:9b:83:e4:62:f9:c8:15:90:98:e5:50:67:83:2f:
                    06:8a:e0:85:42:5f:83:6b:ee:37:77:f3:6a:cf:0f:
                    01:a0:5d:ff:b2:86:09:e6:b8:27:89:a4:3c:29:75:
                    e3:25:f5:bb:62:0f:a8:30:74:86:d0:bf:38:fb:fd:
                    8e:68:38:c4:af:48:e8:89:8f:8f:b2:b4:24:a6:c6:
                    7f:1f:fc:9c:73:8a:0a:92:5f:4b:b2:f3:38:5b:82:
                    52:e3:0f:20:42:11:c6:82:c1:39:18:c1:f2:fa:70:
                    e8:4a:d5:dc:eb:33:d6:d1:2c:e8:9f:28:6f:9e:a5:
                    de:7d:94:51:c5:08:7e:94:00:68:f7:c7:b7:dd:a4:
                    53:1d:eb:48:5a:7e:64:32:d7:f0:e8:c3:75:10:ba:
                    22:4a:47:81:2f:46:2b:4d:ae:a2:c2:fb:a1:a5:89:
                    40:5a:8f:96:93:c2:3c:2e:18:fd:a9:c6:2a:0f:e5:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:29:11:22:14:04:92:D6:9A:AD:53:2A:40:22:4A:74:D4:88:EB:EF
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UCkRIhQEktaarVMqQCJKdNSI6-8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:db:fa:28:8b:65:fc:5f:ad:08:98:8c:67:d8:5b:b4:86:
         54:b5:6e:42:3d:ec:79:63:32:3d:f7:b8:60:ff:ba:8b:4f:7b:
         0c:48:61:67:a4:f9:89:50:4e:92:95:48:a3:6c:64:7d:2c:4d:
         80:1f:8f:24:d5:8e:b7:54:a2:cf:79:e8:cc:bb:08:78:11:77:
         66:55:06:f6:3d:74:a6:9a:0e:b6:24:b8:65:e7:7e:dd:4a:65:
         04:45:f2:02:a2:d0:aa:3b:50:b6:22:76:38:cd:a7:85:3f:f5:
         00:93:b7:09:e2:50:2a:be:ab:9b:c7:8e:61:b7:86:c4:f3:2a:
         aa:1c:40:7d:42:b4:74:ba:57:8b:79:b1:19:6a:c5:30:b3:46:
         ce:eb:bf:40:3c:23:25:4e:18:3f:56:5d:8a:8e:d2:65:27:cb:
         84:cc:c8:3d:75:aa:27:75:53:e2:c2:b9:72:81:13:c3:2c:3e:
         50:5e:fd:91:0d:44:95:89:6d:5e:18:aa:42:58:05:4d:d5:6a:
         e3:c6:23:9e:47:6a:ac:48:fc:a7:e4:6b:48:fb:aa:90:43:8f:
         55:91:2d:b0:af:a1:65:b4:4c:58:c6:07:04:b9:f0:d5:a2:57:
         2b:e7:3f:9b:9f:30:11:e3:c5:39:20:b1:f3:ce:19:91:e5:cd:
         a7:c8:f4:7a
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMDExMDQw
ODM4MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDUwMjkxMTIyMTQwNDky
RDY5QUFENTMyQTQwMjI0QTc0RDQ4OEVCRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe8MCFeK6rd+yIPjldlzIMbnEt+/LQsXJyefuIQFn0Km7E9p4m
pIqT7ZOPLwaBb5p7+QwVyALgqAbNhZIOWXEdLN30bf3aK+SfKXKbg+Ri+cgVkJjl
UGeDLwaK4IVCX4Nr7jd382rPDwGgXf+yhgnmuCeJpDwpdeMl9btiD6gwdIbQvzj7
/Y5oOMSvSOiJj4+ytCSmxn8f/JxzigqSX0uy8zhbglLjDyBCEcaCwTkYwfL6cOhK
1dzrM9bRLOifKG+epd59lFHFCH6UAGj3x7fdpFMd60hafmQy1/Dow3UQuiJKR4Ev
RitNrqLC+6GliUBaj5aTwjwuGP2pxioP5Qp9AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUUCkRIhQEktaarVMqQCJKdNSI6+8wHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1VDa1JJaFFFa3Rh
YXJWTXFRQ0pLZE5TSTYtOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJ5MpAwDQYJKoZIhvcNAQELBQADggEBAHOg2/ooi2X8X60ImIxn2Fu0hlS1
bkI97HljMj33uGD/uotPewxIYWek+YlQTpKVSKNsZH0sTYAfjyTVjrdUos956My7
CHgRd2ZVBvY9dKaaDrYkuGXnft1KZQRF8gKi0Ko7ULYidjjNp4U/9QCTtwniUCq+
q5vHjmG3hsTzKqocQH1CtHS6V4t5sRlqxTCzRs7rv0A8IyVOGD9WXYqO0mUny4TM
yD11qid1U+LCuXKBE8MsPlBe/ZENRJWJbV4YqkJYBU3VauPGI55HaqxI/Kfka0j7
qpBDj1WRLbCvoWW0TFjGBwS58NWiVyvnP5ufMBHjxTkgsfPOGZHlzafI9Ho=
-----END CERTIFICATE-----